CVE-2016-9532

CVE-2016-9532 concerns LibTIFF. An integer overflow in the writeBufferToSeparateStrips function (tiffcrop.c) in LibTIFF before 4.0.7 can be triggered by a crafted TIFF file, causing denial of service via an out-of-bounds read. Affected versions are LibTIFF

CVE-2013-2625

CVE-2013-2625 is an Access Bypass in OTRS where access rights by the object linking mechanism were not verified. Affected products/versions include OTRS Help Desk prior to 3.2.4, 3.1.14, 3.0.19 and OTRS ITSM prior to 3.2.3, 3.1.8, 3.0.7, as well as related FAQ versions. The issue is network-explo...

CVE-2013-4074

CVE-2013-4074 affects Wireshark CAPWAP dissector: CAPWAP data handling in epan/dissectors/packet-capwap.c treats -1 as an error value, enabling remote crafted packets to crash the application. Affected are Wireshark 1.6.x prior to 1.6.16 and 1.8.x prior to 1.8.8. Remediation: upgrade to the fixed...

CVE-2013-6646

CVE-2013-6646 is a use-after-free vulnerability in Google Chrome’s Web Workers implementation. The flaw affects Chrome on Windows (pre-32.0.1700.76) and macOS/Linux (pre-32.0.1700.77), enabling remote denial of service and potentially other unspecified impacts via worker shutdown-related vectors....

CVE-2013-7088

CVE-2013-7088 affects ClamAV prior to 0.97.7, with a buffer overflow in the libclamav component. The vulnerability is described across multiple sources (CNVD, OSV, NVD, CVE records) as a memory boundary issue that can lead to buffer/heap overflow. Affected software: ClamAV’s libclamav, before ver...

CVE-2014-2709

Cacti versions 0.8.7g, 0.8.8b and earlier are affected by CVE-2014-2709 due to improper escaping of shell metacharacters in unspecified parameters, enabling remote command execution. This CVE is listed among multiple vulnerabilities (including CVE-2014-2326/2327/2328/2708/4002) reported by adviso...

CVE-2014-3167

CVE-2014-3167 refers to multiple vulnerabilities in Google Chrome/Chromium prior to version 36.0.1985.143 that could allow a denial of service or other impact via unknown vectors. The connected documents confirm the issue is part of a set of Chromium flaws fixed in subsequent Chromium/Chrome upda...

CVE-2015-1238

CVE-2015-1238 affects Skia in Google Chrome/Chromium before 42.0.2311.90, enabling a remote out-of-bounds write that can cause a denial of service (and possibly other impact). The Debian advisory confirms a fix in 42.0.2311.90-1 for chromium-browser; upgrade to 42.0.2311.90 or newer. Other connec...

CVE-2015-1252

Chrome CVE-2015-1252 affects the common/partial_circular_buffer.cc vulnerability in Google Chrome before 43.0.2357.65. The issue is an out-of-bounds write when handling wraps in PartialCircularBuffer::Write/PartialCircularBuffer::DoWrite, which could allow a sandbox escape or cause a denial of se...

CVE-2015-1279

CVE-2015-1279 : Integer overflow in CJBig2_Image::expand within PDFium (fxcodec/jbig2/JBig2_Image.cpp) used by Google Chrome before 44.0.2403.89 leads to a heap-based buffer overflow when processing large height/stride values. Impact described as remote denial of service (and unspecified other im...

CVE-2015-2191

Wireshark vulnerability CVE-2015-2191: Integer overflow in the TNEF dissector (epan/dissectors/packet-tnef.c) can cause a denial of service (infinite loop) by crafting the packet length. Affected versions are Wireshark 1.10.x before 1.10.13 and 1.12.x before 1.12.4. Several advisories note this i...

CVE-2015-2750

CVE-2015-2750 is an open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 that allows remote attackers to redirect users to arbitrary sites and facilitate phishing via the // sequence. The issue affects Drupal’s URL-related API functions; there is no exploitation detail in the...

CVE-2015-5230

CVE-2015-5230 affects PowerDNS Authoritative Server 3.4.x up to before 3.4.6. The DNS packet parsing/generation code can crash the server on crafted query packets, enabling a remote DoS. Upgrading to 3.4.6 or later (per Fedora advisories and vendor fix) is the indicated remediation. No exploitati...

CVE-2015-8313

CVE-2015-8313 affects GnuTLS: the first padding byte in CBC mode is not correctly validated, enabling a MITM POODLE-style attack to potentially reveal plaintext. Connected sources show this vulnerability cited in multiple advisories (Debian DLA-364-1, SUSE/SUSE-SU-2016:0077-1, IBM FSM bulletin, N...

CVE-2015-8871

OpenJPEG library (before 2.1.1) contains a use-after-free in opj_j2k_write_mco (j2k.c). This CVE (CVE-2015-8871) allows remote attackers to potentially cause impact via unknown vectors; the NVD description notes unspecified impact, while several advisories/OSS feeds associate this with denial of ...

CVE-2016-10742

CVE-2016-10742 affects Zabbix before 2.2.21rc1, 3.x before 3.0.13rc1, 3.1.x and 3.2.x before 3.2.10rc1, and 3.3.x and 3.4.x before 3.4.4rc1.** The vulnerability is an open redirect caused by unsafely handling the request parameter, enabling a remote attacker to redirect users to external URLs. Th...

CVE-2016-1686

The CVE-2016-1686 entry concerns PDFium (as used by Google Chrome up to version 51.0.2704.63). The flaw is in CPDF_DIBSource::CreateDecoder in core/fpdfapi/fpdf_render/fpdf_render_loadimage.cpp, where decoder-initialization failure is mishandled, enabling a remote attacker to trigger an out-of-bo...

CVE-2016-2372

CVE-2016-2372 concerns an information leak/out-of-bounds read in Pidgin due to MXIT protocol handling. Specifically, a malicious party can send an invalid file-transfer size, potentially triggering an out-of-bounds read that may cause a denial of service or allow copying memory contents to a file...

CVE-2016-2378

CVE-2016-2378 affects Pidgin’s MXIT protocol handler. Crafted MXIT data from the server with negative length values can trigger a buffer overflow, leading to memory corruption (and potential code execution) as described in the CVE entry (CVSS v3 base score 8.1). The provided documents detail the ...

CVE-2016-7178

CVE-2016-7178 affects Wireshark 2.x before 2.0.6 where the UMTS FP dissector (epan/dissectors/packet-umts_fp.c) may fail to allocate memory for certain data structures. This can allow a remote attacker to crash the application via a crafted UMTS packet, causing a denial of service. The issue is r...

CVE-2017-0372

CVE-2017-0372 concerns MediaWiki’s SyntaxHighlight extension. The initial description notes parameter injection in the SyntaxHighlight extension could lead to multiple vulnerabilities in affected releases prior to 1.23.16, 1.27.3, and 1.28.2. Connected documents corroborate concrete details: a re...

CVE-2017-12865

The CVE-2017-12865 entry describes a stack-based buffer overflow in ConnMan's dnsproxy.c (affecting ConnMan 1.34 and earlier). A crafted DNS response can crash the service or allow remote code execution, via the name variable. Public disclosures across multiple sources (GNUs/Gentoo GLSA, Debian D...

CVE-2017-14449

SDL2_image-2.0.2 contains a double-free vulnerability in the XCF image rendering path. A specially crafted XCF image can trigger a double-free, potentially enabling arbitrary behavior on vulnerable systems. Affected: SDL2_image libraries (notably 2.0.2). Public advisories (e.g., Mageia GLSA-2018-...

CVE-2017-14604

GNOME Nautilus before 3.23.90 is vulnerable to spoofing a file type via the .desktop extension, allowing a .desktop file (e.g., named as something.pdf) whose Exec launches a malicious command to be displayed as a safe document. The attack depends on the file having execute permissions, and Nautil...

CVE-2017-5118

CVE-2017-5118 describes a CSP bypass in Blink used by Google Chrome (Mac/Win/Linux) and Chromium builds, where CSP restrictions were not correctly propagated to javascript: scheme pages. The underlying issue allowed a remote attacker to bypass the Content Security Policy via a crafted HTML page. ...

CVE-2017-9324

The CVE-2017-9324 issue affects OTRS versions 3.3.x (up to 3.3.16), 4.x (up to 4.0.23), and 5.x (up to 5.0.19). A user with agent permissions can open a crafted URL (index.pl?Action=Installer with ;Subaction=Intro/Start/System) to gain administrative privileges, then read and modify all system se...

CVE-2018-13302

CVE-2018-13302 affects FFmpeg 4.0.1 in the libavformat/movenc.c handle_eac3 path. A crafted AVI can trigger an out-of-bounds access when handling multiple independent substreams, leading to denial of service (and potentially other impacts as described in the entry). Public advisories note this vu...

CVE-2018-6621

CVE-2018-6621 affects FFmpeg/libavcodec/utvideodec.c: decode_frame allows remote attackers to trigger a denial of service (out-of-bounds/read) via a crafted AVI file. Debians/DLA-1630, DSA-4249 and related advisories show this was fixed by libav/ffmpeg package updates. The Debian entries explicit...

CVE-2018-6794

Suricata before 4.0.4 is vulnerable to an HTTP detection bypass (CVE-2018-6794) in detect.c and stream-tcp.c. A server can inject data before the TCP 3‑way handshake completes; web clients may accept the data, but Suricata’s HTTP/tailored stream checks can skip it, primarily affecting HTTP signat...

CVE-2018-9273

CVE-2018-9273 is a memory-leak vulnerability in the PCP dissector (epan/dissectors/packet-pcp.c) of Wireshark. Affected products/versions per the provided docs: Wireshark 2.4.0–2.4.5 and 2.2.0–2.2.13. The issue is a memory leak in the PCP dissector, with no additional details on exploitation path...

CVE-2019-14586

CVE-2019-14586 is a use-after-free vulnerability in the EDK II firmware component. The connected documents confirm the issue affects the edk2 package within EulerOS/Oracle Linux environments, and that an authenticated user could potentially escalate privileges, disclose information, or cause deni...

CVE-2019-17350

CVE-2019-17350 affects the Xen hypervisor (Arm domU) with a vulnerability in a compare-and-exchange operation that can cause an infinite loop, leading to a local DoS. Affected releases include Xen up to 4.12.x. Exploitation requires local access and is bound to the Arm domain. Remediation: patche...

CVE-2019-3467

CVE-2019-3467 affects Debian-LAN-related components used with Debian Edu: Debian-edu-config versions earlier than 2.11.10 and debian-lan-config earlier than 0.26 were configured with overly permissive ACLs on the Kerberos admin server. This misconfiguration allowed password changes for other Kerb...

CVE-2020-10941

Summary: CVE-2020-10941 affects Arm Mbed TLS before 2.16.5, where an attacker could recover an RSA private key by measuring cache usage during import. The connected advisories confirm updated packages (e.g., 2.16.7) across distributions (e.g., Fedora/Debian), indicating remediation by upgrading t...

CVE-2020-28603

CGAL CGAL-5.1.1 Nef polygon parsing contains CVE-2020-28603: an out-of-bounds read in PM_io_parser::read_hedge() e->set_prev() can lead to code execution. Connected advisories confirm the same family of vulnerabilities and provide upgrade guidance. Mitigation: upgrade CGAL to a newer release. ...

CVE-2020-28634

CGAL CGAL-5.1.1 Nef polygon‑parsing contains multiple CVEs (e.g., CVE-2020-28634) that allow out‑of‑bounds reads leading to code execution via Nef_S2/SNC_io_parser.h and related PM_io_parser/SNC_io_parser reads. Public advisories (Debian GLSA 202305-34; Gentoo GLSA; Debian DLA-3226) fix these by ...

CVE-2020-29486

CVE-2020-29486 affects Xen up to 4.14.x with oxenstored; an unprivileged client (guest) can modify xenstore node ownership, causing quota exhaustion and potential memory DoS that can crash a specific guest or the host. Systems using oxenstored are vulnerable; builds using C xenstored are not. Pub...

CVE-2020-9760

WeeChat prior to 2.7.1 (affecting 0.3.4–2.7) contains a buffer overflow in handling IRC message 005 when longer nick prefixes trigger a new nick mode; this can crash the client (denial of service). Upgrading to WeeChat 2.7.1 or newer is the stated mitigation. Related advisories reference CVE-2020...

CVE-2021-21834

GPAC Project on Advanced Content library v1.0.1 contains an exploitable integer overflow in the MPEG-4 decoding path (co64 atom) that leads to a heap-based buffer overflow and memory corruption. An attacker can convince a user to open a crafted MPEG-4 video to trigger this vulnerability. Public a...

CVE-2021-35368

CVE-2021-35368 affects OWASP ModSecurity Core Rule Set (CRS) 3.1.x before 3.1.2, 3.2.x before 3.2.1, and 3.3.x before 3.3.2 via a Request Body Bypass caused by a trailing pathname. The issue is validated across multiple advisories: GLSA-202305-25 (Gentoo) instructs upgrading to CRS 3.2.2 or 3.3.3...

CVE-2021-36409

CVE-2021-36409 affects libde265 (v1.0.8) and is caused by an Assertion failure scaling_list_pred_matrix_id_delta==1 in sps.cc:925, which can lead to Denial of Service when decoding a crafted file. Multiple connected sources confirm the same issue and indicate DoS potential (and possible unspecifi...

CVE-2021-3731

CVE-2021-3731 affects LedgerSMB with clickjacking risk where an attacker could trick a user into performing unintended actions via wrapping. Connected advisories corroborate cross-site scripting/clickjacking exposure and related input handling weaknesses across multiple distros (Debian, Ubuntu); ...

CVE-2021-46837

CVE-2021-46837 affects res_pjsip_t38 in Sangoma Asterisk 16.x prior to 16.16.2, 17.x prior to 17.9.3, 18.x prior to 18.2.2, and Certified Asterisk before 16.8-cert7. A crash can be triggered by an m=image line with zero port in a response to a T.38 re-invite initiated by Asterisk; the crash is du...

CVE-2022-38863

MPlayer and mencoder are affected by CVE-2022-38863 (Buffer Overflow in libmpdemux/mpeg_hdr.c, mp_getbits). The issue affects MPlayer/MEncoder builds around SVN-r38374-13.0.1. Public advisories (Debian DLA-3255-1, Gentoo GLSA-202405-05, Mageia MGASA-2024-0062, Ubuntu USN-5895-1, OpenVAS entries) ...

CVE-2022-42325

CVE-2022-42325 concerns Xenstore in the Xen hypervisor. A vulnerability allows a malicious guest to create an arbitrary number of Xenstore nodes when a node is created in a transaction and later deleted in the same transaction; if the transaction is finalized with an error, it completes partially...

CVE-2024-25714

CVE-2024-25714 affects Rhonabwy up to 1.1.13. The HMAC signature verification uses a strcmp-based comparison that can leak timing information via a side-channel, as it stops at the first difference. The documented fix replaces this with a constant-time function (gnutls_memcmp). No exploitation de...

CVE-2025-38097

In the Linux kernel, CVE-2025-38097 concerns the espintcp encap socket cache. The vulnerability stems from the current caching of the encap socket, which can cause a reference leak in the netns when xfrm_state references are dropped out of order (xfrm_state -> encap_sk -> netns). If the net...

CVE-2025-38115

Root cause: In the Linux kernel net_sched, the SFQ qdisc could crash when gso_skb handling inflated sch->q.len and an enqueue on an empty SFQ qdisc was followed by an immediate drop. The fix updates sfq_drop() to properly clear q->tail in that scenario. Affected component: net_sched sch_sfq...

CVE-2025-38154

CVE-2025-38154 affects the Linux kernel sockmap path (bpf/sockmap) where sk->sk_socket can be used after free due to a race with backlog/thread close paths. The description in the connected documents explains that sk_socket is not locked/referenced in the backlog, enabling a race with the rele...

CVE-2025-38183

CVE-2025-38183 relates to a Linux kernel lan743x driver issue where lan743x_ptp_io_event_clock_get() could write past ptp->extts[] because LAN743X_PTP_N_EXTTS was 4 while channel could be up to 7. The root cause is an out-of-bounds write in extts[channel] when updating local timestamps. The fi...